Signature tuning by group in IDS MC?

[fields.james]

I have just moved up in the world from CSPM to IDS MC on VMS. Nice interface, but isn't there any way to create a signature configuration that I can apply to a whole group of sensors? Part of the reason you have a central console is to enable group management (I thought)...and even CSPM had this.

--James

[darin.marais · Accepted solution]

Copy the signature set to all of the ids sensors using the copy command button. Then generate and deploy it to all of the sensors. You can do the same for filter etc.

[fields.james]

Hey...thanks! When I looked at the copy option I didn't scroll all the way down...signatures is the last optinon on the list! Duh!